vaga.kommune.no

HTML metadata

Technology

Server

Microsoft-IIS

CMS

Joomla

jQuery

1.12.4 known XSS (<3.5)

Stack

ASP.NET

Third-party hosts loaded (2)

• cdn.jsdelivr.net×1
• website-integration.companycast.live×1

DNS records live

NS

• ns1.hyp.net
• ns2.hyp.net
• ns3.hyp.net

MX

• 0 vaga-kommune-no.mail.protection.outlook.com

TXT

• 5rG/fwli4DWJ5Ykg7niQT3lFWrFRhd9yvYwPbvW4Do//V8r4Eoi/znh9ZonFgiKGjQwtv6EK6UtfnktdQW5o8g==
• DomainVerification=C90YG41GZ6QWZWAG53SC21REGR59LWE0LODKDX82CB93C8VCV1A3D7OJAN3ATZ6P

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.regiondata.no -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dsm1h58m@ag.dmarcian.com; ruf=mailto:dsm1h58m@fr.dmarcian.com; fo=1;

policy: reject (enforced)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM5YB3S/o9Mm+uW0YqIt8QjRudiKkWPFJiETcuTPy153UBohi629Cgk1m+S+8S5a3DZLM3kE5MUSg0…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf08PvifvfIwsaQRudNKtH9QE1CKlcyDGH0BAEBmkE+vDPKue87lYgIeg3Rl1i09WN9eQO7h66sxyg66v3…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0KhDkvuI6bgxJ3nz/37PjBnORBW5Ag2GTv0wOAxI0hzUW9pJrJPXhCXt58RvjSNwI5GuoQm+lY+ROkxtk1+30QO…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.vaga.kommune.no/

present

• strict-transport-security
• content-security-policy
• x-frame-options

findings

• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (4)

• skjema.no×1
• ngr.no×1
• elementscloud.no×1
• acos.no×1

Linked from (1)

• vagabib.no×1